I have new RB951G-2HnD router. I did basic configuration of subject device with static ip address.
Here is my configuration:
/ip address
add address=80.245.89.17/24 interface=ether1 network=80.245.89.0
/ip route
add distance=1 gateway=80.245.89.1
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1
Issue is that I can’t ping my gateway and any other ip addresses outside the lan.
Why it’s not working?
gering7
January 15, 2014, 10:42am
3
plisken:
Try this
thank you for your reply
I tried that and result is the same
Rudios
January 16, 2014, 11:09am
4
How is your local LAN configured, and how did you setup dns?
gering7
January 16, 2014, 11:18am
5
Cunfigured DHCP server. LAN is working fine. DNS was setuped form settings menu. Allow remote request checkbox is checked.
And I ping gateway from mikrotik not from local machine
plisken
January 16, 2014, 12:24pm
6
Have you configured a DHCP-client for WAN
gering7
January 16, 2014, 12:27pm
7
no, because ISP provide me static IP
gering7
January 16, 2014, 12:36pm
9
plisken:
Try it with dhcp-client
dhcp-client should be configured with and static ip address in same time, right?
plisken
January 16, 2014, 12:44pm
10
I think so, ik have not experience with static IP but i try to help you
gering7
January 16, 2014, 12:48pm
11
thank you. I’ll try that today at evening
plisken
January 16, 2014, 1:00pm
12
gering7
January 16, 2014, 6:35pm
13
I’ve tried both these things and result is the same
efaden
January 16, 2014, 6:37pm
14
If you are getting a static ip from your ISP you don’t need to run DHCP on that interface. Are you sure it isn’t static being provided by DHCP?.. Also are you sure your subnet mask and gateway are correct?
Post your whole export… and post a print of your routing table.
-Eric
gering7
January 16, 2014, 6:47pm
15
efaden:
If you are getting a static ip from your ISP you don’t need to run DHCP on that interface. Are you sure it isn’t static being provided by DHCP?.. Also are you sure your subnet mask and gateway are correct?
Post your whole export… and post a print of your routing table.
-Eric
I’m 100% that I have static ip and all data is correct, because in case of direct connection to laptop everything is working fine. Also my ip address is tied with mac address of mikrotik ether1.
So? here is my data
[admin@MikroTik] > export
jan/02/1970 19:24:11 by RouterOS 6.7
software id = 3QVC-XWWT
/interface bridge
add l2mtu=2290 name=bridge1 protocol-mode=rstp
/interface ethernet
set [ find default-name=ether3 ] master-port=ether2
set [ find default-name=ether4 ] master-port=ether2
set [ find default-name=ether5 ] master-port=ether2
/interface wireless security-profiles
add authentication-types=wpa-psk,wpa2-psk eap-methods=“”
management-protection=allowed mode=dynamic-keys name=WPA2
supplicant-identity=“” wpa-pre-shared-key=gering89Ger
wpa2-pre-shared-key=gering89Ger
/interface wireless
set [ find default-name=wlan1 ] band=2ghz-b/g/n dfs-mode=no-radar-detect
disabled=no l2mtu=2290 mode=ap-bridge security-profile=WPA2 ssid=
“Wireless Lan” wireless-protocol=802.11
/ip hotspot user profile
set [ find default=yes ] idle-timeout=none keepalive-timeout=2m
mac-cookie-timeout=3d
/ip pool
add name=dhcp_pool1 ranges=192.168.1.2-192.168.1.254
/ip dhcp-server
add address-pool=dhcp_pool1 disabled=no interface=bridge1 name=dhcp1
/interface bridge port
add bridge=bridge1 interface=ether2
add bridge=bridge1 interface=wlan1
/ip address
add address=192.168.1.1/24 comment=“LAN IP Subnet” interface=bridge1 network=
192.168.1.0
add address=80.245.89.17/24 interface=ether1 network=80.245.89.0
/ip dhcp-server network
add address=192.168.1.0/24 dns-server=192.168.1.1 gateway=192.168.1.1
/ip dns
set allow-remote-requests=yes servers=79.140.160.18,79.14.160.20
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1 src-address=
80.245.89.0/24
/ip route
add distance=1 gateway=80.245.89.1
/system leds
set 0 interface=wlan1
/ip route> print
Flags: X - disabled, A - active, D - dynamic,
C - connect, S - static, r - rip, b - bgp, o - ospf, m - mme,
B - blackhole, U - unreachable, P - prohibit
DST-ADDRESS PREF-SRC GATEWAY DISTANCE
0 A S 0.0.0.0/0 80.245.89.1 1
1 ADC 80.245.89.0/24 80.245.89.17 ether1 0
2 ADC 192.168.1.0/24 192.168.1.1 bridge1 0
efaden
January 16, 2014, 6:50pm
16
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1 src-address=
80.245.89.0/24Thats not right…
Get rid of the source address. Should be
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1Also… try ping 8.8.8.8 from the console on the mikrotik and see if it works.
gering7
January 16, 2014, 6:56pm
17
efaden:
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1 src-address=
80.245.89.0/24Thats not right…
Get rid of the source address. Should be
/ip firewall nat
add action=masquerade chain=srcnat out-interface=ether1Also… try ping 8.8.8.8 from the console on the mikrotik and see if it works.
previously I had correct value, somebody told me try this value and I forgot revert it. Now did that and result is the same. Timeout when I ping 8.8.8.8 address
efaden
January 16, 2014, 6:57pm
18
Ping your gateway?.. also your sure that it is tied to the correct mac-address?
gering7
January 16, 2014, 7:00pm
19
mac address is correct. I got same timeout when I ping gateway
plisken
January 16, 2014, 7:04pm
20
I see that the ports stand in switch mode master port ether2
set these on disabled and try than